@cosmicdrift/kumiko-guards 0.367.0 → 0.368.0

package/README.md

@@ -46,13 +46,13 @@ merged on top. A security exception that expires within 14 days blocks.
 ## Raw-SQL markers
 
 `guard-raw-sql` blocks `.unsafe()` / `asRawClient()` outside `db/queries/*`,
-`bun-db/query.ts` and testing code. A `// kumiko-lint-ignore raw-sql <reason>`
+`db/query.ts` and testing code. A `// kumiko-lint-ignore raw-sql <reason>`
 marker on the call's line or the line above only suppresses while its
 (file, reason) pair is frozen in `.kumiko-raw-sql-baseline.json` at the repo
 root. A new or reworded marker without a baseline entry fails the check, so
 every exception shows up as a baseline diff in review. Without a baseline file
 the guard only warns, so consumers do not break on bump. Prefer a typed
-`bun-db` helper; freeze a deliberate exception with:
+`db/query` helper; freeze a deliberate exception with:
 
 ```
 bunx kumiko-guards checks --write-baseline --guard=guard-raw-sql

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cosmicdrift/kumiko-guards",
-  "version": "0.367.0",
+  "version": "0.368.0",
   "description": "AST-based security guards for Kumiko repos: direct-fs/fetch, tenant escalation, admin-API, escape hatches and related checks, run over a shared ts-morph project.",
   "license": "BUSL-1.1",
   "author": "Marc Frost <marc@cosmicdriftgamestudio.com>",
@@ -28,7 +28,7 @@
     "kumiko-pre-push": "./src/pre-push.sh"
   },
   "dependencies": {
-    "@cosmicdrift/kumiko-repo-manifest": "0.367.0",
+    "@cosmicdrift/kumiko-repo-manifest": "0.368.0",
     "ts-morph": "^28.0.0"
   },
   "publishConfig": {

package/src/_lib/sql-inventory.ts

@@ -65,8 +65,9 @@ export const RAW_SQL_ALLOWLIST: ReadonlyArray<RegExp> = [
   /(^|\/)(packages\/[^/]+\/)?src\/db\/migrate-runner\.ts$/,
   /(^|\/)(packages\/[^/]+\/)?src\/db\/schema-inspection\.ts$/,
   /(^|\/)(packages\/[^/]+\/)?src\/db\/render-ddl\.ts$/,
-  /(^|\/)(packages\/[^/]+\/)?src\/bun-db\/query\.ts$/,
+  /(^|\/)(packages\/[^/]+\/)?src\/db\/query\.ts$/,
   /(^|\/)(packages\/[^/]+\/)?src\/testing\//,
+  /(^|\/)packages\/testing\/src\/helpers\//,
   // ponytail: explicit enumeration — a blanket regex would auto-allow any new .unsafe()
   /\/bundled-features\/src\/config\/db\/queries\/resolver\.ts$/,
   /\/bundled-features\/src\/custom-fields\/db\/queries\/field-access\.ts$/,

package/src/guard-direct-entity-writes.ts

@@ -22,7 +22,7 @@
  *   2. **Find direct writes.** Two forms:
  *      - Method form `<receiver>.insert(<tableIdent>)` / `.update` / `.delete`.
  *      - Function form `insertOne|updateMany|deleteMany|...(<db>, <tableIdent>,
- *        ...)` from `@cosmicdrift/kumiko-framework/bun-db` (table = arg[1]) —
+ *        ...)` from `@cosmicdrift/kumiko-framework/db` (table = arg[1]) —
  *        exactly the path that created the sessions-instance bug
  *        (`updateMany(ctx.db.raw, userSessionTable, ...)` without a
  *        lifecycle event).
@@ -81,7 +81,7 @@ const EXCLUDE =
 // projection apply.
 const TX_RECEIVER_NAMES = new Set(["tx", "trx", "handle"]);
 
-// bun-db function helpers with signature `(db, table, ...)` — table is
+// db/query function helpers with signature `(db, table, ...)` — table is
 // always arg[1]. A direct write on an ES table goes through these just as
 // often as through the Drizzle method form. Maps to the coarse op bucket
 // for the violation message.
@@ -340,7 +340,7 @@ function isInsideProjectionApply(callNode: Node): boolean {
 
 // Extracts (table identifier, db/receiver expression, op) from a write
 // call — both forms: the Drizzle method `<recv>.insert(table)` and the
-// bun-db function `updateMany(db, table, ...)`. Casts around the table arg are
+// db/query function `updateMany(db, table, ...)`. Casts around the table arg are
 // unwrapped; undefined for non-writes or when the table arg is still no plain
 // identifier (computed tables are not resolvable → skip, never a false block).
 function resolveWrite(

package/src/guard-no-date-api.ts

@@ -53,9 +53,6 @@ const ALLOWLIST = [
   // DB layer: drizzle column wrapper, migration tooling — Date is a
   // primitive wire format there
   /packages\/framework\/src\/db\//,
-  // Bun.SQL layer (post-Drizzle replacement) — same boundary as db/,
-  // converts Date→Temporal at the driver boundary.
-  /packages\/framework\/src\/bun-db\//,
   // Event-store internals: createdAt stamps, snapshot time, archive time
   /packages\/framework\/src\/event-store\//,
   // Pipeline: system hooks, idempotency cache (low-level timestamps)
@@ -76,7 +73,7 @@ const ALLOWLIST = [
   // it's defaults/audit stamps working together with the DB layer.
   /packages\/framework\/src\/engine\/(types|registry|config-helpers|create-app|define-feature|state-machine|access|field-access|boot-validator|qualified-name)\.ts$/,
   // Testing helpers
-  /packages\/framework\/src\/testing\//,
+  /packages\/testing\/src\/helpers\//,
   // Search adapter internals
   /packages\/framework\/src\/search\//,
   // File storage (coming in Gap-04)
@@ -111,7 +108,7 @@ const ALLOWLIST = [
   // Date object from fs.Stats.mtimeMs — wire boundary, not a Temporal format.
   /packages\/server-runtime\/src\/run-prod-app-static-files\.ts$/,
   // Bun.SQL timestamptz columns arrive as native Date (driver wire format,
-  // same reason as packages/framework/src/bun-db/ above).
+  // same reason as packages/framework/src/db/ above).
   /packages\/publish\/src\/rollback\.ts$/,
 ];
 

package/src/guard-raw-sql.ts

@@ -7,7 +7,7 @@
  * on the call's own line or the line directly above (one hit per marker). A bare tag with no
  * reason text after it does NOT suppress the finding — production code
  * should otherwise route SQL through `db/queries/*` or typed
- * `bun-db/query` helpers.
+ * `db/query` helpers.
  *
  * A marker only suppresses while its (file, reason) pair is frozen in
  * `.kumiko-raw-sql-baseline.json` at the repo root, so every new or reworded
@@ -116,7 +116,7 @@ export async function collectRawSqlFindings(
 }
 
 const MARKER_REMEDIATION =
-  "New or reworded raw-sql marker. Use a typed bun-db helper (selectMany, selectInnerJoin, " +
+  "New or reworded raw-sql marker. Use a typed db/query helper (selectMany, selectInnerJoin, " +
   "insertOnConflictDoNothing, upsertOnConflict, aggregateWhere, where jsonText …) if one fits; " +
   "otherwise freeze the exception with `kumiko-guards checks --write-baseline --guard=guard-raw-sql` " +
   "so the baseline diff shows up in review.";
@@ -124,7 +124,7 @@ const MARKER_REMEDIATION =
 export const check: RepoCheck = {
   name: "guard-raw-sql",
   hint:
-    "Rule: runtime SQL only in db/queries/*, bun-db/query.ts, testing/*, or with " +
+    "Rule: runtime SQL only in db/queries/*, db/query.ts, testing/*, or with " +
     "// kumiko-lint-ignore raw-sql <reason> on the line or the line above — and that " +
     "(file, reason) must be frozen in .kumiko-raw-sql-baseline.json " +
     "(`kumiko-guards checks --write-baseline --guard=guard-raw-sql`).",

package/src/guard-section-fields-raw.ts

@@ -67,7 +67,7 @@ const SCAN: ScanSpec = {
   frameworkWithin: [
     "packages/framework/src/engine/**",
     "packages/framework/src/i18n/**",
-    "packages/framework/src/testing/**",
+    "packages/testing/src/helpers/**",
     "packages/headless/src/**",
     "packages/renderer/src/app/**",
   ],

package/src/guard-table-ddl.ts

@@ -17,7 +17,8 @@
  *   - packages/framework/src/event-store/**          ES meta tables
  *   - packages/framework/src/pipeline/event-consumer-state.ts
  *   - packages/framework/src/pipeline/projection-state.ts
- *   - packages/framework/src/stack/**                test-stack helpers, pushEntityProjectionTables, helper definitions
+ *   - packages/framework/src/db/table-push.ts       the DDL helpers themselves
+ *   - packages/testing/src/stack/**                  test-stack helpers, pushEntityProjectionTables, helper definitions
  *   - **\/__tests__/**                               test setup
  *   - **\/drizzle/**                                 drizzle-kit configuration
  *   - **\/bin/migrate.ts                             app-owned migrate CLI
@@ -45,7 +46,8 @@ export const ALLOWLIST_PATTERNS: ReadonlyArray<RegExp> = [
   /\/packages\/framework\/src\/event-store\//,
   /\/packages\/framework\/src\/pipeline\/event-consumer-state\.ts$/,
   /\/packages\/framework\/src\/pipeline\/projection-state\.ts$/,
-  /\/packages\/framework\/src\/stack\//,
+  /\/packages\/framework\/src\/db\/table-push\.ts$/,
+  /\/packages\/testing\/src\/stack\//,
   /\/__tests__\//,
   /\/drizzle\//,
   /\/bin\/migrate\.ts$/,

package/src/guard-test-stack-drift.ts

@@ -41,6 +41,8 @@ const SCAN: ScanSpec = {
     "packages/framework/src/**/*.integration.test.ts",
     "packages/bundled-features/src/**/*.integration.ts",
     "packages/bundled-features/src/**/*.integration.test.ts",
+    "packages/testing/src/**/*.integration.ts",
+    "packages/testing/src/**/*.integration.test.ts",
   ],
 };